Online Password Attacks
Online password attacks involve password guessing attempts for networked services that use a username and password authentication scheme.For this purpose which tools are use Hydra, Medusa, Ncrack, and even Metasploit have built in handling of many network protocol authentication schemes.These three tools are probably the most popular for performing password security audits. They each have their strengths and weaknesses and can handle various protocols effectively.
- Medusa
Medusa is intended to be a speedy, massively parallel, modular, login brute-forcer.
- Ncrack
Ncrack is a high-speed network authentication cracking tool.The ncrack tool is one of the few tools that is able to brute-force the Windows RDP protocol reliably and quickly:
- THC-Hydra
THC-Hydra is another powerful online password cracker under active development and is worth knowing well. It can be used to crack a variety of protocol authentication schemes including SNMP:
Hydra can also be used for brute-forcing SSH:
